SECURE KUBERNETES LIKE A PRO | HOW DEVSECOPS ENGINEERS SECURE Kubernetes ?

Support my work
www.buymeacoffee.com/abhishekprd Security is a journey.
Security is a very very important aspect of DevSecOps. One should definitely know how to secure their Kubernetes clusters. If not, the clusters will be compromised and sensitive information will be leaked and application can be hacked. Are you an aspiring DevSecOps engineer ? Do you want to learn how to secure your Kubernetes clusters like a Pro ? Watch the video till the end.
Instagram: / abhishekveeramalla_off...
Video Notes in GitHub
github.com/iam-veeramalla/Kub...
FREE DEVOPS COURSE
• DEVOPS ZERO TO HERO CO...
Telegram channel
telegram.me/abhishekveeramalla
About me:
-----------------
LinkedIn: / abhishek-veeramalla-77...
GitHub: github.com/iam-veeramalla
Medium: / abhishekveeramalla-av
KZbin: / @abhishekveeramalla .
.
Disclaimer: Unauthorized copying, reproduction, or distribution of this video content, in whole or in part, is strictly prohibited. Any attempt to upload, share, or use this content for commercial or non-commercial purposes without explicit permission from the owner will be subject to legal action. All rights reserved.

[@samikshasharma3544]

Thanks!

[@AbhishekVeeramalla]

Thanks for supporting the channel 😍

[@anjaliranot897]

you have so muck knowlegde and patience to explain all concept so nicely

[@VikramSharvansh]

Great efforts abhishek👏👏 Each & every video of u making the devops/Kubernetes learning journey simple & interesting. Thanks once again.

[@AbhishekVeeramalla]

😍

[@jackayuk424]

The best one best this space thanks a million sir ❤

[@akhilc8211]

thank you anna my day finishes with your videos......

[@AbhishekVeeramalla]

😍

[@SivakumarA-lx5dj]

@Abhishek, Thanks a lot for your video on most awaited topic

[@AbhishekVeeramalla]

Welcome

[@gouravchhabra6142]

Would like to add few security aspects which I have been using so hope others can also take them into consideration: 1. Applying k8s policies using KYVERNO to restrict security policies in k8s resources. 2. Using Manifest/Helm scanners tools like CHECKOV or DATREE to avoid any misconfigurations or vulnerabilities in them. 3. Using cluster scanners or RBAC Visulizers like KUBESCAPE. 4. Using Docker image signing and attestation tool like COSIGN. 5. Following CIS benchmarks for K8s or Cloud on which k8s hosted. 6. Securing Ingress using TLS. 7. Secrets Encryption using sealed secrets or external secret operator. 8. Using Distroless images for building containers.

[@AbhishekVeeramalla]

1st point is covered in latest video Will do others soon. Thanks for sharing Gourav

[@evansdanso2374]

Abhishek, you're great!!! I have taken full DevOps classes but never understood a lot until I started following you! I came into Devops with a little IT background as a data analyst. Thank a lot!!! Can you do a short video to explain various web applications( Nginx, apache tomcat, etc) and how often DevOps Engineer encounter them..and other applications that DevOps Engineers most often deploy. Please 🙏...

[@AbhishekVeeramalla]

Thanks and noted

[@pjj7466]

Fantastic session bro.

[@nikhilmeshram4376]

beautiful explanation sir....... thank you so much....👌👌👌👌👌

[@AbhishekVeeramalla]

❤️

[@kaverichowdary6637]

East are West abhishek anna is best 😊

[@AbhishekVeeramalla]

Haha

[@rohanrustagi7857]

So true anna

[@VaibhavSupe]

Hello Abhishek. Thank you so much….really hat’s off you for such an amazing content with easily understandable language & your dedication🤩🤩🤩 If possible please make more such videos on Security / DevSecOps related topics. Thanks a lot 🤩🤩🤩

[@AbhishekVeeramalla]

😍

[@nishanthhg6437]

Thank you for all the contents

[@AbhishekVeeramalla]

Welcome

[@princeraghu3807]

Its very quality & valuable content brother😊

[@AbhishekVeeramalla]

😍

[@sonalimohapatra880]

Yeah Abhishek bro is the best ❤❤

[@AbhishekVeeramalla]

😍

[@rohita9689]

Papa you are giving such gifts that i can't even explain.. Thank you ❤

[@AbhishekVeeramalla]

😍

[@phaneerameswarareddychilum7189]

Abhisek your content is great and the way you teach is really superb. only one correction, I guess the image scan command is docker snyk not docker synk if I am correct. please correct me if I am wrong

[@AbhishekVeeramalla]

U r correct .. sorry for the typo and mispronunciation

[@haroon.niamat]

Informative..!!👍

[@AbhishekVeeramalla]

😍

[@lakshmanababu4279]

Thanks

[@AbhishekVeeramalla]

Thanks for contributing to the channel

[@senthilkumar5129]

Thank you

[@AbhishekVeeramalla]

Welcome

[@shalubajpai4225]

Great videos Abhishek! Can you plz make videos on how to handle volume in kubernetes?

[@AbhishekVeeramalla]

Noted

[@tanayabanerjee2380]

Hi,,, Please make the demo part on Rbac , Network policy and rest of the topics ...it will be very helpful 🙏🙏

[@AbhishekVeeramalla]

Sure

[@ketanmorey1953]

Abhishek bhai❤

[@AbhishekVeeramalla]

Welcome

[@ganeshgoudru8444]

Hi Abhishek, is it possible to make hands on in this video? Bcz usually in EKS we won’t be maintaining control plane right so how to implement security for eks clusters?

[@saswatpriyabrat]

This is an excellent Video with a bundles of Knowledge....Thanks for this awesome Video ❤

[@AbhishekVeeramalla]

😍

[@rohithreddy6853]

Thnx anna If possible please do a video on how to make ATS resume for freshers on AWS with DevOps please anna

[@AbhishekVeeramalla]

Noted

[@twizzoe]

@Abhishek, thanks for this detailed lecture. I need clarification on securing the API-SERVER. If we are using Amazon EKS, I thought since Amazon handles the control plane where the API-SERVER is located, it handles the security of every component involved. With this video, I am assuming we still need to take an extra step to secure it

[@AbhishekVeeramalla]

Will cover that

[@techairenglish1357]

If I am using AKS, then is the API server is already secured since master node is managed by Azure or it is not required?

[@krishnakumarkumar5710]

Good content for free is dream in this selfish world. But some worriers like Abhishek prove it wrong...

[@AbhishekVeeramalla]

Thanks a lot

[@sth5287]

Hi abhishek, i love your content.. Can you please make a series on azure devops ??? Please.... Please...

[@AbhishekVeeramalla]

Noted

[@sth5287]

@@AbhishekVeeramalla thank you abhishek ♥️♥️

[@ifirefox1]

Hi Abhishek, thank you so much for content, i am more focussed towards devsecops, should i finish your zero to hero kubernetes coarse before i start this video?

[@AbhishekVeeramalla]

If u don’t have understanding of k8s yes

[@tarunmeher5464]

Hey Abhishek.. Can you give us a trick or any plan that we can remember all these aws service, kubernetes topic so that it will be easy for the interview,, because there are so many topic on devops and not every one have sharp minded.. so hope you understand and give us a solution for this.. Thank you❤

[@kundalakshmidevi4449]

very nice explanation abhi sir but i have a doubt here you have mentioned docker scan in github repo but in video you said docker sync . Is it docker scan or docker sync??????

[@AbhishekVeeramalla]

synk is a tool that performs scanning on docker images. docker scan internally uses synk.

[@ThecookBoy]

Hai Abhishek. Verramalla can we expect this in the practical video it might be helpful for a better understanding

[@AbhishekVeeramalla]

It will be too lengthy .. I will think of something

[@kodjoviamedimele3066]

Hi sir. First of all thank you for the quality of your contents. I have an issue when implementing the cicd with Argo. I import the repo and when it comes to the Jenkins file I am lost. Wondering if you can go over how you configure it ?

[@AbhishekVeeramalla]

Please watch the ultimate cicd pipeline viceo

[@kodjoviamedimele3066]

@@AbhishekVeeramalla I was doing it with the video but I didn’t see the part where you went through the Jenkins file configuration. I tried to figure out but with no success. I will try again today.

[@jaganarumugam8527]

Which part you faced issue..

[@twizzoe]

I would like to inquire if Vault can be used for encryption of the ETCD

[@AbhishekVeeramalla]

I haven’t explored that much .. sorry

[@ganeshgoudru8444]

Hi Abhishek thanks for the video...one doubt the command is snyk or synk?

[@AbhishekVeeramalla]

snyk , sorry for the typo

[@ganeshgoudru8444]

@@AbhishekVeeramalla thanks Abhishek. Just wanted to clarify 😊

[@yuvichh]

31:00, is it Docker scout or Synk. I mean sync is another project and I can see the Docker Scout!

[@AbhishekVeeramalla]

Snyk

[@ashuofficial28]

Ingress graphana prompetus those all use in Aks na not in use those all in eks.

[@AbhishekVeeramalla]

They are used in aws as well

[@khagolakalyan]

Nice Video...Can you Please explain the link between Google optimize and A/B testing with Kubernetes cluster and One more Keycloak.link.woth oidc..What's the link between these two..I m getting confused..

[@AbhishekVeeramalla]

Ok noted

[@khagolakalyan]

Thanks for your reply@@AbhishekVeeramalla ... Eagerly Waiting for your Video...😍😍

[@kishorkhilare6375]

Sir, Can you explain in hindi also

[@AbhishekVeeramalla]

Many subscribers don’t understand hindi bro

[@averagebadmin10player]

Cluster monitoring can't be done by Prometheus or grafana ?

[@AbhishekVeeramalla]

For example ?

[@averagebadmin10player]

@@AbhishekVeeramalla 6th point of this video you told Sysdig works like a deamon set if some hacker is attacking in that way can't be done by prometheus and grafana ?

[@napoleanbonaparte9225]

Pod container security kuda adutunaaru anna

[@AbhishekVeeramalla]

Adi kuda cheddam aithe emundi

[@nishanthhg6437]

First view sir

[@AbhishekVeeramalla]

Thanks alot

[@DanielSmith-hd9iq]

do you mean docker snyk here?

[@AbhishekVeeramalla]

yes

[@lakshmisucharitha3529]

where is the practical sesion video for all these 7 security steps ? Can any one ping here the link

[@udaykumar-tb5kn]

Bro. This security of kubernetes playliat or devops hero zero playlist confused with which playlist and what order should be flowed pls tell

[@AbhishekVeeramalla]

This video is not part of devops zero to hero. Please check again. This is only part of kubernetes playlist and if u want to learn kubernetes advanced u need to Learn this

[@udaykumar-tb5kn]

@@AbhishekVeeramalla understood bro thanks lot for detailed explanation

[@delengr1026]

Thanks

[@AbhishekVeeramalla]

Welcome